# Subprocessors

The third-party services Shine engages to deliver the Services. We list every subprocessor that processes customer personal data, what it does, and where it operates. Mirrors the authoritative list at <https://www.shine.studio/subprocessors>; see [Security](https://www.shine.studio/security) for how these vendors are vetted.

## Infrastructure

Hosting, storage, and database services that hold the Shine platform.

- **Amazon Web Services (AWS)** — Application hosting, object storage (S3), and managed database (RDS). All customer recordings and database records live on AWS. Location: United States. Data: all customer content, including interview recordings, transcripts, and account data.
- **Vercel** — Static hosting and edge delivery for the shine.studio marketing site. Location: United States. Data: no customer content; IP addresses and request metadata for the marketing site.
- **Cloudflare** — CDN, DNS, and bot protection (Turnstile) for the marketing site. Location: global edge network. Data: IP addresses and request metadata.
- **Supabase** — Interview-capture database, authentication, and serverless functions for the interview-recording surface. Location: United States. Data: interview recordings (at the point of capture), respondent identifiers, and session metadata.

## Video & Media

Services that host, encode, and render recorded interview media.

- **Mux** — Video hosting, encoding, and delivery for interview recordings. Location: United States. Data: interview video files and derived stream metadata.
- **Shotstack** — Server-side video rendering for clip and asset generation. Location: Australia. Data: interview clips and rendering job metadata.

## AI & Transcription

AI providers used strictly as data processors. Customer content is NOT used to train these providers' general-purpose models — opt-out flags are set on every customer-data API call.

- **Deepgram** — Speech-to-text transcription of interview recordings. Location: United States. Data: interview audio and resulting transcripts.
- **OpenAI** — AI claim extraction, summarization, and quote generation. Location: United States. Data: interview transcripts and derived text snippets.
- **Anthropic** — AI claim extraction, summarization, and quote generation. Location: United States. Data: interview transcripts and derived text snippets.
- **Google (Gemini)** — AI claim extraction, summarization, and asset enhancement. Location: United States. Data: interview transcripts and derived text snippets.
- **Perplexity** — AI-visibility (GEO) auditing: queries how AI answer engines describe a customer brand. Opt-in, per workspace. Location: United States.
- **ElevenLabs** — AI voice generation for narrated assets. Location: United States. Data: generated audio output (no customer audio uploaded).

## Payments

Payment processing and payout services.

- **Stripe** — Subscription billing and customer payment processing. Location: United States.
- **Tremendous** — Gift-card and reward payouts to interview respondents who complete a session. Location: United States. Data: respondent name, email address, and payout status.

## Communications

Transactional email and notification delivery.

- **Google Workspace (Sheets)** — Internal operations tooling. Location: United States.
- **Resend** — Transactional email delivery (invitations, magic links, receipts). Location: United States. Data: recipient email addresses and email content.

## Analytics & Product Telemetry

- **Google Analytics 4** — Marketing-site visitor analytics. Location: United States.
- **Microsoft Clarity** — Session replay and heatmap analytics for the marketing site. Location: United States. Data: anonymized session recordings and click maps.
- **PostHog** — Product analytics and error tracking inside the Shine application. Location: United States.

## Questions

Email <hello@shine.studio> for subprocessor change notifications, our DPA, or the security questionnaire.